Telecom
Hackers Could Decrypt Your GSM Phone Call
Researchers have discovered a flaw in the GSM standard used by AT&T and T-Mobile that would allow hackers to listen in.
Researchers from BlackBerry at DefCon security conference in Las Vegas, USA, presented an attack that can intercept GSM calls as they’re transmitted over the air and decrypt them to listen back to what was said.
And the vulnerability has been around for decades.
Most mobile calls around the world are made over the Global System for Mobile Communications standard; in the US, GSM underpins any call made over AT&T or T-Mobile’s network.
Regular GSM calls aren’t fully end-to-end encrypted for maximum protection, but they are encrypted at many steps along their path, so random people can’t just tune into phone calls over the air like radio stations.
The researchers found, though, that they can target the encryption algorithms used to protect calls and listen in on basically anything.
“GSM is a well documented and analyzed standard, but it’s an aging standard and it’s had a pretty typical cybersecurity journey,” says Campbell Murray, the global head of delivery for BlackBerry Cybersecurity.
“The weaknesses we found are in any GSM implementation up to 5G. Regardless of which GSM implementation you’re using there is a flaw historically created and engineered that you’re exposing.”
The problem is in the encryption key exchange that establishes a secure connection between a phone and a nearby cell tower every time you initiate a call.
This exchange gives both your device and the tower the keys to unlock the data that is about to be encrypted. In analyzing this interaction, the researchers realized that the way the GSM documentation is written, there are flaws in the error control mechanisms governing how the keys are encoded. This makes the keys vulnerable to a cracking attack.
“It’s a really good example of how the intention is there to create security, but the security engineering process behind that implementation failed.”
As a result, a hacker could set up equipment to intercept call connections in a given area, capture the key exchanges between phones and cellular base stations, digitally record the calls in their unintelligible, encrypted form, crack the keys, and then use them to decrypt the calls.
The findings analyze two of GSM’s proprietary cryptographic algorithms that are widely used in call encryption—A5/1 and A5/3.
The researchers found that they can crack the keys in most implementations of A5/1 within about an hour. For A5/3 the attack is theoretically possible, but it would take many years to actually crack the keys.
“We spent a lot of time looking at the standards and reading the implementations and reverse engineering what the key exchange process looks like,” BlackBerry’s Murray said.
“You can see how people believed that this was a good solution. It’s a really good example of how the intention is there to create security, but the security engineering process behind that implementation failed.”
The researchers emphasize that because GSM is such an old and thoroughly analyzed standard, there are already other known attacks against it that are easier to carry out in practice, like using malicious base stations, often called stingrays, to intercept calls or track a cellphone’s location.
Additional research into the A5 family of ciphers over the years has turned up other flaws as well. And there are ways to configure the key exchange encryption that would make it more difficult for attackers to crack the keys. But Murray says that the theoretical risk always remains.
Short of totally overhauling the GSM encryption scheme, which seems unlikely, the documentation for implementing A5/1 and A5/3 could be revised to make key interception and cracking attacks even more impractical. The researchers say that they are in the early phases of discussing the work with the standards body GSMA.
The trade association said in a statement to WIRED that, “Details have not been submitted to the GSMA under our coordinated vulnerability (CVD) programme. When the technical details are known to the GSMA’s Fraud and Security Group we will be better placed to consider the implications and the necessary mitigation actions.”
Though it may not be that surprising at this point that GSM has security issues, it’s still the cellular protocol used by the vast majority of the world. And as long as it’s around, real call privacy issues remain, too.
Nigeria, through the Nigerian Communications Commission (NCC), has won the 2025 World Summit on the Information Society (WSIS) prize for its project, the Digital Awareness Programme (DAP), under Category C3, which is on Access to Information and Knowledge.
L–R: Executive Vice Chairman/CEO of the Nigerian Communications Commission (NCC), Dr. Aminu Maida, receives the WSIS 2025 Prize (Category C3: Access to Information and Knowledge) from the Secretary-General of the International Telecommunication Union (ITU), Doreen Bogdan-Martin, following the selection of the Commission’s Digital Awareness Programme (DAP) as winner of the category.
The DAP, one of hundreds of projects submitted for the WSIS Prizes competition 2025, received the highest number of votes in its category, earning it the top honour. The programme equips secondary schools across the country with Information and Communication Technology (ICT) resources and provide internet connectivity to support teaching, learning, and research. Since inception in 2006, over 300 schools across Nigeria’s six geopolitical zones have benefitted from the programme.
The Executive Vice Chairman of the NCC, Dr. Aminu Maida, received the award during the WSIS Prizes Winners 2025 Ceremony held on Monday in Geneva, Switzerland.
In his acceptance remarks, Dr. Maida thanked the hosts, the International Telecommunications Union (ITU) and WSIS, for recognising Nigeria’s efforts in promoting inclusive digital access across Nigeria, noting that the award would serve as further motivation for the Commission.
“This recognition is more than a celebration of past efforts—it is an encouragement to press forward. It affirms that investing in digital inclusion is investing in national development, and that Nigeria’s work is being seen and valued on the global stage,” Dr. Maida said.
Four other Nigerian projects—the Women Techsters and the Advanced Digital Empowerment Programme for Tertiary Institutions (ADEPTI) under Capacity Building, the Telecom-Based Research Grant Initiative under Enabling Environment, and the Digital Learning Initiative under e-Learning—were also celebrated for their nomination for the Champions Category of Projects at the WSIS Prizes Ceremony. Although they were not among the top-voted entries, they were acknowledged for their significant merit and impact.
The WSIS Prizes competition recognises and promotes projects that effectively leverage ICTs to advance sustainable development. The competition showcases how technology can serve as a powerful tool for addressing global challenges and achieving the SDGs. Projects from around the world are recognised annually, highlighting diverse approaches to building an inclusive information society.
The World Summit on the Information Society (WSIS) is a United Nations (UN) initiative aimed at building a people-centred, inclusive, and development-oriented information society. It provides a multi-stakeholder platform to address issues related to Information and Communication Technologies (ICTs) and their role in achieving sustainable development.
The Forum is an annual event that brings together high-level representatives from governments, the private sector, civil society, academia, the technical community, and international organisations. It serves as a global platform for implementing the WSIS Action Lines, which are aligned with the UN Sustainable Development Goals (SDGs).
Nigerian Communications Commission (NCC) has given telecom tower operators in the country August 2025 deadline to fix persistent network hitches in their facilities or face regulatory sanctions.
The Executive Vice Chairman (EVC) of the commission, Dr. Aminu Maida, reportedly gave the ultimatum during a high-level meeting with key industry players, attended by representatives of IHS Towers, American Tower Corporation (ATC), and Pan-African Towers, and mobile network operators (MNOs) in Abuja
According to sources, discussions at the meeting focused on the recurring challenges in the telecoms sector, particularly power failures, equipment malfunctions, and insufficient site maintenance, that have been causing poor Internet and call services in the country
Specifically, Maida tasked the tower operators on the imperative of complying with the NCC’s updated Quality of Service (QoS) framework, which now extends performance obligations to infrastructure providers, not just telecom service providers.
According to him, the timeline given by the commission is more than enough time for all parties to align with the performance standards expected of them.
Recently, to ensure compliance with the standards, the NCC introduced a Major Incident Reporting Portal for real-time outage disclosures; developed public performance dashboards to enhance transparency; mandated that telecom tower companies meet strict Key Performance Indicators (KPIs).
Although the tower operators had previously cited delayed payments from MNOs as a reason for service lapses, the NCC had dismissed the justification, insisting that all parties must meet their obligations.
The EVC maintained: “Operators must fulfill both their technical and financial responsibilities. Poor service delivery—regardless of internal disputes—will attract consequences.”
Available data on the telecom tower infrastructure shows that IHS Towers has the largest assets with 16,000–19,000 sites, (62% market share); compared to American Tower Corp’s (ATC’s) about 8,270 towers; and Pan-African Towers’ 760–1,000 sites nationwide.
The latest NCC’s August deadline is believed to be putting pressures on the tower operators to improve the quality of their facilities for improved services as the commission had hinted of its plan to sanction defaulting operators with fines or stricter regulatory actions.
Industry experts believe that the NCC’s directive is a welcomed development as it will ensure reliable Internet connectivity and improved services quality for telecom consumers in the country.
Nigerian Communications Commission (NCC) is set to play a pivotal role at the upcoming 6th edition of the Telecom Sector Sustainability Forum (TSSF 6.0), where it will lead a critical discussion on the sustainable growth of Mobile Virtual Network Operators (MVNOs) in Nigeria.
Set against a backdrop of innovation and opportunity, this forum, organized by Business Remarks, aptly themed “Unlocking Nigeria’s MVNO Potential: Status, Trends, Investment, and Future Prospects,” is scheduled for August 26, 2025. This event reinforces the nation’s commitment to fostering a robust, competitive, and inclusive telecommunications landscape.
The forum will bring together a diverse array of key stakeholders from across the telecom ecosystem to deliberate on strategies for integrating MVNOs effectively into Nigeria’s rapidly evolving digital economy. With the recent advancements in technology and the issuance of 43 MVNO licenses to new players, MVNOs are poised to significantly enhance service delivery, drive digital transformation, penetrate underserved markets, and stimulate healthy competition across the sector.
As the global MVNO market is experiencing significant growth, with projections indicating continued expansion, experts believe that with the right regulatory environment and access to infrastructure, emerging markets like Nigeria can leverage MVNOs to unlock new value for both operators (by utilizing excess network capacity) and customers. Customers can enjoy a rich array of niche value-added services tailored to their needs.
Having been proactive in introducing a five-tier MVNO licensing classification, each with distinct services and a 10-year validity period, signaling a clear path for new entrants, the telecom regulator (NCC) will deliver a keynote address outlining the Commission’s regulatory framework, interventions, and commitment to ensuring a conducive environment for MVNO operations.
Mrs. Bukola Olanrewaju, Convener of the forum and Managing Editor of Business Remarks, emphasized the importance of collaboration. “TSSF 6.0 is designed to be a melting pot of ideas, bringing together Mobile Network Operators (MNOs), MVNOs, telecoms infrastructure providers, Internet Service Providers, industry associations, and technology experts,” she said.
“Our goal is to ignite discussions that will shape the future of MVNOs in Nigeria, ensuring their sustainable growth and their critical role in extending digital prosperity across the nation.”
The forum will feature interactive sessions, thought-provoking panel discussions, insightful paper presentations, and abundant networking opportunities. This event aims to provide a platform for stakeholders to share insights, address challenges, and explore collaborative pathways for sustainable growth.
NIPOST to Crack Down on Criminal Courier Operators
DICON, Saudi Firm to Produce Drones, Satellites in Nigeria
Secret Service Seizes $400M in Crypto, Cold Wallet among World’s Largest
FG Says No Going Back to Nuclear Testing
Nnamani, CEO Digital Realty Nigeria Bags Digital Economy Icon of the Year @ Digital Innovation Awards in Ghana
Telecom2 days agoY’ello Care’s 21-Day Campaign Bridges Digital Divide for Thousands Nationwide
General News2 days agoEnugu Air Commences Operations Today
E-Business2 days agoGalaxy Backbone, Rural Electrification Agency Commit to Deepening Digital and Energy Access Across Nigeria
Broadcasting2 days agoNDPC Slaps Multichoice with ₦766M Fine for Data Privacy Violations
News2 days agoLagos-Calabar Highway Gets $100M Push from ECOWAS to Drive Regional Growth
Telecom2 days ago20 Years of Digital Leadership: Layer3’s Legacy and the Road Ahead
News2 days agoNBS May Release Rebased Figures for Nigerian Economy July 11
Telecom14 hours agoNCC Wins Global ICT Award for Digital Awareness in Schools